Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Davlin records in CISA KEVNo Davlin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 34
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a ..
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02096 · Published 2009-05-12 · No fix listed CWE-22
Priority LOW 28
Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02615 · Published 2008-08-29 · No fix listed CWE-255
